License Management

It is recommended that you read the following topic before proceeding:

Administrative Scopes

For all A10 licenses, GLM (Global License Manager) is the authoritative service. All A10 products confirm with license and licensing policies dictated by GLM.

In case, A10 products are deployed in the isolated network and cannot reach GLM, A10 provides ELM (Enterprise License Manager) that can be deployed within the enterprise network. ELM does not need internet connectivity and can function completely offline. GLM has the provision to delegate some authority to ELM and ELM can function as License manager on behalf of GLM. Also, HC 5.3 onwards, HC also has ELM integrated inside HC, so separate ELM installation is not required. ELM inside HC is called Local License Manager (LLM).

While management of actual license happens in Provider scope, selection of License Manager is done in Controller Scope. User can select between GLM or LLM by login using Super-Admin in Controller Scope.

Supported Licenses

Currently Harmony Controller supports the following types of licenses:

  • Controller license to Connect Thunder to Controller

  • Flexpool device license to run Thunder

License Manager

There are two types of license managers GLM and LLM.

Global License Manager (GLM)

For all A10 licenses, GLM (Global License Manager) is the authoritative service. All A10 products conform with license and licensing policies dictated by GLM. GLM is available at https://glm.a10networks.com. Default License Manager for HC is set to GLM. User can change this in Controller scope by logging in as Super-admin.

Local License Manager (LLM)

HC 5.3 Release integrates ELM (Enterprise License Manager) inside HC. It’s called LLM (Local License Manager). For the use cases where HC does not have internet connectivity or cannot reach GLM, LLM can be used for license management. When LLM is used, User has to export licenses from GLM and manually import them in LLM and it works completely offline.

LLM currently supports following license types:

  • MBU license for HC licensing

  • Capacity Flexpool Device License

  • Instance Flexpool Device License

Important Notes:

  • License manager is configured at Controller scope (Super-Admin login), so all providers in HC uses the same License Manager.

  • For LLM, licenses are imported at Controller scope and then they are available to all Providers for use. Each provider has to activate or add the required license from the imported license list in LLM.

  • Please check GLM documentation for understanding different types of licenses.

Types of Licenses Supported

Currently Harmony Controller supports the following types of licenses: - Controller license to Connect Thunder to Controller - Flexpool device license to run the Thunder

Controller License

  • Controller license is needed for connecting Thunder devices to Harmony Controller and is managed in form of a pool of MBUs (Managed Bandwidth Units).

  • Customer can use this pool of MBU between multiple Provider accounts. These provider accounts can be across multiple HC deployments.

  • At any time, a provider can request additional capacity from License Manager or return unused capacity to the License Manager configured.

Each Thunder device has a fixed MBU value. When a Thunder device connects to the Controller, it consumes the Controller license in the equal amount of its MBU value. If MBUs required by the device are not available, it fails to register. When a device de-registers, the MBUs go back to the pool.

_images/licensing.png

Most of MBU license have unlimited device count support e.g. restriction is only on Bandwidth units, not on device count. If customer has MBU license with Device count restriction also, Device count behaves same as MBUs e.g. MBU and Device count can be shared across multiple providers.

When Controller is able to access GLM via internet, most flexible workflows are possible. This is called online activation. However, in case Controller does not have access to GLM, User has to configure LLM and export licenses from GLM and import them in LLM first. After that, each provider can continue to use license workflows as usual.

Device License

  • Device license is needed to run the Thunder device. A10 supports multiple types of device licenses.

  • These licenses can be installed on the device directly via CLI or via Controller.

  • While Controller recognizes most of the license types, it supports management of only Flexpool license as of now.

  • Flexpool device license is a pool of capacity that can be shared among multiple devices as required. Any number of devices can be launched until the pool is exhausted.

  • If a Thunder device with a device license already installed on it connects to the Controller, Controller recognizes and displays the license.

  • If the device does not have the license installed, the license can be installed from the license pools available in Controller. In case the device is being orchestrated by the Controller, license can be pre-assigned as part of orchestration workflow.

License Validation Status

Depending on the availability of the license and if the requested capacity matches or not the criteria, you can see the license states: * Activated - If the requested license is available and if you have chosen the right capacity, then the license state is activated and it displays the green color. * Expiring - If the current license is about to expire and it shows a message to renew the license, then the license state is in expiring state and it displays the yellow color. * Expired - If the current license is expired and it shows a message to renew the license, then the license state is in pending and it displays the red color. * Failed - If there is an error in license activation or the license is not available or the request capacity is not matching the criteria, the license state is failed and it displays the red color.

License Expiry

  • In the Harmony portal, users will see warning messages three months prior to expiry of the license in the License page. Four weeks prior to the expiry of the license, users will see warning messages on all other pages.

  • User needs to renew the license on viewing these warning messages for the applications to work as expected.

Workflows

Overall, following licensing workflows are available in different scopes as below:

Controller Scope Workflows (Super Admin)

  • License Manager configuration
    • GLM

    • Local License Manager

  • License Management for LLM
    • Importing Licenses

    • Editing Licenses

    • Revoking Licenses

    • Managing License activations

    • Monitoring license usage

Provider Scope Workflows (Provider Admin)

  • Adding a License

  • Adding a Device and Apply New Flexpool License

  • Changing or Editing the Capacity

  • Changing the Device License

  • Deleting a License

  • Updating the Device License

Example Workflows: If HC instance has internet connectivity and can reach to GLM, licensing can be done via below workflow:

Controller Scope:
Licensing Manager Configuration
  • GLM is default LM setting. No change required.

Provider Scope (Login via Provider admin in each provider):
Adding Licenses
  • Add HC and Flexpool device Licenses by using entitlement keys for licenses purchased in GLM

Licensing Devices
  • Add new Devices and choose to apply Flexpool license key with required bandwidth in add flow.

  • During device registration, Flexpool license will be applied to Device.

  • Device will also associate to HC license automatically.

  • If device is deleted/deregistered, License will be released from the pool.

  • Multiple devices can be registered this way to share same licenses.

Managing Licenses
  • If provider needs to add or reduce existing HC license capacity, it can be done via modify license workflow.

  • Provider can delete HC license and release the capacity back to license.

If HC instance cannot reach to GLM, licensing can be done via below workflow:

Controller Scope:

Licensing Manager Configuration

  • GLM is default LM setting. Change to LLM.

  • Activate LLM

  • Export HC and Device Flexpool licenses from GLM for the activated LLM UUID.

  • Import them in LLM using activation string provided in GLM.

  • Once licenses are imported in LLM, Provider workflows remain same as before. Now each provider can access the licenses and use them.

Controller Scope Workflows (Super Admin)

License Manager Configuration

Controller Scope (Super Admin login)

License manager can be setup by super admin. Default GLM is configured as License manager for a new HC instance. If GLM is used as License Manager, no other configuration is required in Controller scope via Super Admin. Licenses can be activated and used directly in each provider by logging as Provider Admin.

If user wants to use LLM (Local License Manager), Please follow below steps:

LLM Activation
  1. Log in to Harmony Portal as a Super Admin.

  2. Click License Manager > Edit. License Manager Setup page is displayed.

    _images/glm_super-admin.png

    Note: When the user logs in for the first time the default option is GLM.

  3. Click GLM to set-up license through GLM or click Local License Manager to activate LLM license.

    _images/llm_super-admin.png
  4. Copy the generated UUID and paste it in the GLM page and click Activate. As shown the following figure paste the copied License Manager UUID string in ELM UUID, provide a name in Name, and click Activate.

    _images/activateELM.png
  5. Copy Activation Text as shown in the following figure.

    _images/copyActivationText.png
  6. Paste it in Local license manager set-up page in the Activation String text-box.

    _images/import_license1.png
  7. Click Activate, and the activation is successful.

  8. Click Save to save the LLM activation string.

HC has been configured to act as a local license manager (LLM). As shown in the following figure, the type of license manager is displayed in Type, the UUID of the license manager in UUID and the status of the license manager in Status. But there are no licenses which are imported yet. This page displays the list of the licenses that are in activated stage. Currently there are no licenses listed so licenses will have to be imported from GLM.

_images/licenseMgrSettingsSaved.png

License Management for LLM

Importing a license into LLM

As described in LLM Activation after a LLM has been activated, HC functions as a local license manager. But if there are no licenses listed, then licenses will have to be imported into HC from GLM. Assuming a GLM license has already been created, this GLM license can be imported into HC, where this global license will now become a locally managed license within HC.

  1. Click Export License on the GLM license details page to navigate to the page that allows for entering ELM UUID.

    _images/exportLicensefromGLM.png
  2. On the License Manager page, click Import to open the Import License dialog. Copy the License Manager UUID.

    _images/copyUUIDfromImportLicense.png
  3. Paste it into ELM UUID and click Export. A text-box appears below. Copy the string from the text-box.

    _images/exportLicensefromGLM1.png
  4. Paste it into Exported License String in Import License dialog of License Manager Setup and click Import. The imported license is listed in the License Manager Setup page.

Revoking a License

  1. Log in to Harmony Portal as a Super Admin.

  2. Click License Manager.

    _images/license-mgr.png
  3. Select the license to be revoked, select image_reference and click Revoke.

    _images/revoke.png
  4. Read the warning message before confirming the revoke option.

    _images/revoke_license.png
  5. Click Revoke. On selecting revoke, this returns the license and all of its activations and resources to the A10 Networks GLM.

Note

Revoked licenses cannot be unrevoked.

Revoking and Unrevoking an Activation

  1. Log in to Harmony Portal as a Super Admin.

  2. Click License Manager.

    _images/license-mgr.png
  3. For a particular license, select the activation tab, select image_reference and click Revoke.

    _images/revoke-activation.png
  4. Click Revoke activation for the device.

    _images/revoke-activation-dev.png
    _images/revoke_activation_dev.png
  5. Click Unrevoke activation for the device, to unrevoke an activation.

    _images/unrevoke_device.png
    _images/unrevoke_MBU.png

Note

If the activation is revoked, changes will be reflected in Harmony Controller or device after the agent runs.

Provider Scope Workflows (Provider Admin)

Adding a License

To add a license key or the procured license follow the below mentioned steps:

  1. Click Organization > License.

    _images/license.png
  2. Click Add License.

    _images/add_license.png
  3. Enter the valid Entitlement Token provided by the administrator.

  4. Click Check Token. If it is a valid license, in the next screen you can enter the License Information based on the license type selected.

  5. Enter the capacity for the particular license.

  6. Click Request. On adding the license check the status in the activity log.

    _images/license_activity_log.png
  7. Click the resync button for device license, Harmony Controller will sync license details with license manager.

    _images/resync.png

Note

For device license, ADC, CGN and CFW Subscription License types are supported.

Adding a Device and Apply New Flexpool License

To add a device and apply new flexpool license, follow the below steps:

  1. Click Organization > License.

    _images/license.png
  2. Select the license and to add a device, click Associate Devices in device associated panel.

    _images/associate_license.png
  3. You can either select all the devices or select a particular device and click Update to add a new flexpool license.

    _images/bulk_license.png

Changing or Editing the Capacity

To edit the license capacity follow the below mentioned steps:

  1. Click Organization > License.

    _images/license.png
  2. Select image_reference and click Update Capacity or click Request Capacity Update when you expand the license in License Information.

    _images/edit_license1.png
    _images/edit_license2.png
    _images/edit_license.png
  3. Enter the new capacity, and this cannot be lower than the used capacities.

  4. Click Request. On editing the capacity check the status in the activity log and refresh every time you update the capacity.

Changing the Device License

To change the device license from the available license list follow the below mentioned steps:

  1. Click Organization > License.

    _images/license.png
  2. Expand the license in the device associated panel, select image_reference and click Update License.

    _images/change_device_license1.png
    _images/change_device_license.png
  3. Select the license from the available licenses drop-down list.

  4. Click Update.

Deleting a License

To delete a license or free-up capacity follow the below mentioned steps:

  1. Click Organization > License.

    _images/license.png
  2. Select image_reference and click Delete.

    _images/delete_license1.png
    _images/delete_license.png
  3. Click Delete to confirm deleting of license and devices will no longer be able to connect in absence of the license.

Note

If user selects update device license and changes the key, Harmony Controller will remove the old license and apply the new key.

Updating the Device License

To update a license, follow the below steps:

  1. Click Infrastructure > Devices.

  2. Select the device, select image_reference and click Update License.

    _images/update_license.png
  3. Select an entitlement token, enter the new capacity and click Update.

    _images/change_license.png

See also

  • License Manager Settings

  • Controller License Management

  • Device License Management